Vulnerability in Ly Corporation Armeria

CVE-2026-11752

A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where DataSourceStream in the xDS module can resolve control-plane-supplied filenames and environment variables without restriction, allowing a compromised…

EPSS: 0.003 (24.0th percentile) — read the EPSS interpretation.